cgiemail-exploit

Cgiemail - استغلال كشف الكود المصدري/تضمين الملفات المحلي cgiecho هو سكربت مضمّن مع cgiemail، سيعيد أي ملف ضمن جذر مستندات موقع الويب إذا كان الملف يحتوي على أقواس مربعة وكان النص داخل الأقواس قابلاً للتخمين. cgiemail يُشحن حاليًا مع cPanel وهو مفعّل افتراضيًا. مثال للصفحة: root@kitploit: Success...

CVE-2025-55183

CVE-2025-55183 Scanner per la vulnerabilità di esposizione del codice sorgente delle React Server Functions. Cos'è? CVE-2025-55183: Le Server Actions di React 19.0.0-19.2.1 possono essere sfruttate per esporre il loro codice sorgente completo, inclusi segreti hardcoded, chiavi API e credenziali d...

Reversecore_MCP

Reversecore MCP Engenharia Reversa e Análise de Segurança com IA via Model Context Protocol Um servidor MCP que oferece a assistentes de IA como Claude e Cursor a capacidade de realizar engenharia reversa, análise de malware, pesquisa de vulnerabilidades, perícia digital e auditoria de código-fon...

jsleak

Descrizione Ho sviluppato jsleak durante gran parte del mio tempo libero per esigenze personali. È uno strumento da riga di comando facile da usare, progettato per scoprire segreti e collegamenti in file JavaScript o codice sorgente. jsleak è stato ispirato da Linkfinder e le regex sono state...

0x00sec_code

Codice sorgente per i post su 0x00sec.org Questo repository contiene il codice sorgente dei miei post su 0x00sec.org. Shell remota Post disponibile su: Parte I : https://0x00sec.org/t/remote-shells-part-i/269/1 Parte II. Cripta il tuo link:...

graudit

graudit graudit è un semplice script e set di firme che consente di trovare potenziali vulnerabilità di sicurezza nel codice sorgente utilizzando l'utility GNU grep. È paragonabile ad altre applicazioni di analisi statica come RATS, SWAAT e flaw-finder, mantenendo al minimo i requisiti tecnici ed...

shuffledns

massDNS wrapper to bruteforce and resolve the subdomains with wildcard handling support Feature • Install • Run • Wildcard • License • Discord shuffleDNS is a wrapper around massdns, written in go, that allows you to enumerate valid subdomains using active bruteforce, as well as resolve subdomain...

dnsdiag

DNS Measurement, Troubleshooting and Security Auditing Toolset Have you ever wondered if your ISP is intercepting your DNS traffic? Have you noticed any unusual behavior in your DNS responses, or been redirected to the wrong address and suspected something might be off with your DNS? We offer a...

actions-secrets

GitHub Action di analisi dei segreti di SecureStack Una GitHub Action che analizza il tuo codice sorgente alla ricerca di segreti, credenziali, chiavi API, hostname/URL di server e database, e molto altro! Quando aggiungi questo alle GitHub Actions analizzeremo il tuo codice sorgente per...

CVE-2025-55183-poc

CVE-2025-55183-poc – Next.js React Server Components Server Function Quellcode-Offenlegung Dieses Repository enthält Erkennungswerkzeuge für eine Quellcode-Offenlegungsschwachstelle in Next.js React Server Components RSC / Server Actions , verfolgt als CVE-2025-55183. In verwundbaren Anwendungen...

violent-python3

Código-fonte de "Violent Python" em Python 3 Código-fonte do livro "Violent Python" de TJ O'Connor. O código foi totalmente convertido para Python 3, reformatado para estar em conformidade com os padrões PEP8 e refatorado para eliminar problemas de dependência envolvendo a implementação de...

flareon2024

Soluções do Flare-On 11 Códigos-fonte das minhas soluções para o desafio Flare-On11. Meus writeups de tarefas selecionadas disponíveis aqui...

smbexec

root@kitploit: smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage...

rats-re

Ricostruzione del codice sorgente di Rats! con LLM locali Questo repository è una ricostruzione in corso d'opera del codice sorgente di RATS.EXE, la versione Windows originale di Rats! 1994 di Sean O'Connor. Compila un eseguibile Win32 con Microsoft Visual C++ 4.1 tramite wibo e può essere testat...

react-server-cve-lab

Laboratorio di Sicurezza React Server Components CVE-2025-55183 e CVE-2025-55184 Un ambiente completo di test di sicurezza per le vulnerabilità CVE-2025-55183 Esposizione del codice sorgente e CVE-2025-55184 Denial of Service in React Server Components. ⚠️ Disclaimer SOLO PER SCOPI EDUCATIVI E DI...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

Astra Linux – Vulnerability in Apache2

A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some uses of the legacy content-type-based configuration of handlers. Configurations like “AddType” and similar ones, under certain circumstances where files are requested indirectly, can lead to exposure of local...

rips-scanner

RIPS Ein statischer Quellcode-Analysator für Schwachstellen in PHP-Skripten Anforderungen Webserver: Apache oder Nginx empfohlen PHP: aktuelle Version empfohlen Browser: Firefox empfohlen Installation 1. Laden Sie das neueste Release herunter 2. Entpacken Sie die Dateien in das...

IE11SandboxEscapes

IE11SandboxEscapes Einige Beispielquellcode für behobene IE11-Sandbox-Escapes. c James Forshaw 2014 Nur zu Informationszwecken. Alle Dateien sind unter GPLv3 lizenziert. Weitere Informationen finden Sie in der LICENSE-Datei...

ppfuzz

ppfuzz Prototype Pollution Fuzzer A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀 Installation Binary Source Dependencies Demonstration Usage Basic Options Usage Supporting Materials Contributing Attribution Acknowledments License Installation...